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The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 
All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
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3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
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Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
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(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 
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Reasons For Allowance 

1. Status of Claims: Claims 4, 9, 14, 37-39 were cancelled by the Applicant. Claims 1-3, 
5-8, 10-13, 15-36, 40-42 are allowable for the features listed below: 

2. Angelo discloses a computer system that utilizes a two-piece authentication procedure to 
enable access to secured computer resources. The password verification process of Angelo is 
carried out during a secure power-up procedure. The computer checks for the presence of an 
external token or smart card, following the detection of the token, the computer user is required 
to enter a password. Once the password is entered, than the password is encrypted and a 
peripheral password is created, the peripheral password is compared to a value stored in either 
secure system memory or in the memory contained within a secured resource. If the two values 
match, access to the secured resource is permitted. The encrypted algorithm is stored on the 
token the password themselves are not stored on the token. Angelo also discloses security 
policies, because Angelo teaches varying levels of access within a computer system, with each 
level of access requiring a different password However, Angelo fails to disclose or suggest, the 
passwords being integrated within a set of security policies such that alteration of the security 
policies renders the access code and password inoperative, the security policies including at least 
one security policy selected from the group consisting of policies relating to BIOS settings and 
policies relating to screen interface access. Angelo discloses that there are different passwords 
required to access different features or memory spaces of a secured resource. 

3. Lambert discloses a data processing system for controlling user access to data or services, 
wherein data or application modules for providing the service are stored in a form, which is 
inaccessible without an access key. Users are each allocated a specific user key, which is 
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appropriate for their level of access authority. When a user requests access to stored data or 
requests a service for which stored software modules must be accessed, the data or modules are 
interrogated to identify their stored security access level. If the user key represents the required 
level of access authority an access key is generated from the user key for accessing that data or 
service. However, this is in contrast to the claims, that claim, passwords being integrated within 
a set of security policies such that alteration of the security policies renders the access code and 
password inoperative, the security policies including at least one security policy selected from 
the group consisting of policies relating to BIOS settings and policies relating to screen interface 
access. 

4. Schafer discloses protecting data stored on a disk used with a computer, and a password 
is also registered and stored during installation. The installed boot patch interacts with and is 
responsive to the stored code provided by the key device. Once the patch is installed, when the 
computer boots up, a correct key must be inserted into the key connector. If the correct stored 
code is provided to the boot program, access to the computer's disk is provided. Without the 
access code stored on the key device and proper password, the contents of the disk are 
unreadable. This is in contrast to claims, that claim, passwords being integrated within a set of 
security policies such that alteration of the security policies renders the access code and 
password inoperative, the security policies including at least one security policy selected from 
the group consisting of policies relating to BIOS settings and policies relating to screen interface 
access. Schafer is silent on security policies. Schafer discloses that the boot patch installs hard 
disk partition encryption encoding software into the disk BIOS routine and is used at all times 
during operation of the computer to transparently encode and decode the data on the hard or 
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floppy disk. Without the access code stored on the key device and proper password, the contents 
of the hard or floppy disk is unreadable. 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jenise E. Jackson whose telephone number is (571) 272-3791. 
The examiner can normally be reached on M-Th (6:00 a.m. - 3:30 p.m.) alternate Friday's. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571) 272-3795, The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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